*BSD News Article 76596


Return to BSD News archive

#! rnews 1727 bsd
Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!newsfeed.direct.ca!op.net!news.mathworks.com!uunet!in3.uu.net!news2.digex.net!news5.digex.net!haven.umd.edu!hecate.umd.edu!news
From: "Gary L. Jackson" <garyj@kzin.dorm.umd.edu>
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Q] Set up bpf so I can use tcpdump?
Date: Wed, 21 Aug 1996 14:20:57 -0400
Organization: University of Maryland, College Park
Lines: 24
Message-ID: <321B5389.41C67EA6@kzin.dorm.umd.edu>
References: <4vfh5o$rap@nntpd.lkg.dec.com>
NNTP-Posting-Host: annex9-43.dial.umd.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 2.0 (X11; I; FreeBSD 2.1.0-RELEASE i386)
To: "Michael C. Cambria" <cambria@snads.lkg.dec.com>

Michael C. Cambria wrote:
> 
> I need help using tcpdump on FreeBSD 2.1.5.  Every time I run it, it get
> a message about /dev/bpf0 not being configured.  I cannot find any info
> on configuring bpf.  The man page has programming info, but I couldn't
> find anything re: configuring.
> 
> Am I expected to write a program myself?  I haven't had to do this on
> other unixes I've used.  For example pfconfig(8) on Digital Unix allows
> me to config the packet filter driver.
> 
> Note:  I did not build the kernel (no disk space yet).  I am using what
> I installed of the CD which arrived a few days ago.

Unfortunately, you need to rebuild the kernel with the following line in it:

pseudo-device	bpfilter	16

As I recall, thats all I had to do to get bpf and tcpdump working.

There is a lot more detail for bpf in the manpage (man bpf).

--
						Gary